SCADA Cybersecurity in Factories of the Future

ICS和SCADA系统的完整性和安全性绝对是其功能和可靠可用性的核心。尽管如此，适当的与安全相关的技术和方法是有限的，而且仍然处于早期开发阶段。该项目建议开发一个基线度量模型，用于对整个供应链中使用的ICS和SCADA组件和设备的整体漏洞级别进行分类。这里的供应链是指可能用于制造产品或执行流程的各种设备。这种类型的度量模型将帮助行业在更广泛的风险评估中识别特定组件的脆弱性，例如可编程逻辑控制器（PLC）或远程终端单元（RTU）。将基线度量系统应用于计算机系统和网络的安全性评估本身并不是一种新方法。通信电子安全组（CESG）制作了一个示例，并为云计算环境[1]提供了安全指导。它由一组安全原则组成，为通过云服务处理敏感数据的公共部门组织提供基准指导。另一个值得注意的例子是ISA 62443标准[2]。本标准利用一致性度量来建立一个基线模型，用于量化对工业自动化和控制系统（IACS）安全实践的遵从性。另一个小组探索了SCADA系统内漏洞的定量评估，主要是详细阐述风险管理的成本/收益计算，从而使管理人员能够做出更明智的安全决策。此外，其他研究已经开发了一个定量模型，可用于汇总漏洞度量，特别是针对企业IT和网络bb0。本文提出的研究将进一步开发和扩展应用于安全性的基线度量方法，特别关注关键基础设施组件的漏洞分析。这项研究将导致可用模型和方法的发展，这将有助于风险评估和管理ICS/SCADA组件和系统的过程。提出了项目的四个关键阶段，导致整个研究期间的多个可交付成果，这些定义如下。该项目有一个主要的总体假设，以及四个独立的次要假设，每个阶段一个，如下面的每个阶段标题所示。-主要假设：公制系统的形成将(i)有助于ICS环境中的安全管理过程，（ii）帮助个人做出有关风险管理的决策，以及（iii）有助于开发和实施更明智和更具成本效益的安全保障决策。

The integrity and security of ICS and SCADA systems are absolutely central to their function and reliable availability. Despite this, appropriate security-related technologies and methodologies are limited and still very much in their early development.This project proposes the development of a baseline metric model for the classification of the overall vulnerability level of ICS and SCADA components and devices, used across the supply chain. A supply chain here refers to the variety of devices that could potentially be used to manufacture a product, or execute a process. A metric model of this type will help industries identify how vulnerable a specific component is, such as a Programmable Logic Controller (PLC) or a Remote Terminal Unit (RTU), within a wider risk assessment. The application of baseline metric systems to the evaluation of the security of computer systems and networks is not in itself a new approach. One example has been produced by the Communications-Electronics Security Group (CESG), and provides security guidance for cloud computing environments [1]. It consists of a set of security principles forming baseline guidance for public sector organizations who handle sensitive data via cloud services. Another notable example is the ISA 62443 Standard [2]. This standard draws on conformance metrics to establish a baseline model for quantifying compliance to Industrial Automation and Control System (IACS) security practices. Another group have explored the quantitative assessment of vulnerabilities within SCADA systems, primarily elaborating on the cost/benefit calculations for risk management, thereby allowing managers to make more informed security decisions [3]. Furthermore, other studies have developed a quantitative model that could be used to aggregate vulnerability metrics, specifically for enterprise IT and networks [4]. The research proposed here will further develop and extend the baseline metric methodology as applied to security, with a particular focus on the vulnerability analysis of critical infrastructure components. This research will result in the development of usable models and methods that will aide the process of risk assessment and management of ICS/SCADA components and systems. Proposed are four key phases to the project, resulting in multiple deliverables throughout the period of the research, and these are defined below. There is one primary overall hypothesis for the project, and four separate secondary hypotheses, one for each phase, as illustrated below under each phase heading. - Primary Hypothesis: The formation of a metric system will (i) aid the process of security management in ICS environments, (ii) help individuals to make decisions regarding risk management, and (iii) contribute to the development and implementation of more informedand cost-effective decision making for security safeguards.